I don't and I don't think captchas work against bots at all anymore. Sure work great against humans. Would never put someone through that.
Honestly the best anti-bot measure I found in the stuff I code myself is ... just telling them to wait 30 seconds and try again.
Not very eager to dig into the Mastodon codebase to add it though. And yeah, the problem with any anti-bot measure that works is that if it's universally adopted, bot farmers just need to figure out how to circumvent that particular thing, once.
As you said, cat and mouse, and I'm not sure who's who these days.
https://loud.computer/@virtulis/116210111874634351
nostr:note1xw2m62qa7m273nl4ejhm8rw4y7ynpaaw2ekuzcx2x0xy7pgmyqssymqwpz